Convert 1208b RH-106 to 1208 RH-105 Success!!
Convert 1208b RH-106 to 1208 RH-105 Success!!!
Procedure:
1 - Back-up pm 1208b (0-255)
2 - Make the modification (bypass the two filters, use lead)
3 - Flash the phone to RH-105 (MCU+PPM+CNT)
4 - Write good RH-105 pm
5 - Unlock using JAF
6 - Make Full Factory
Getting MCU ID
MCU ID: 0x2292
FLASH ID0: 88280020 <=> ST -> Type not in database Addr0: 0x01000000 - 0x01FFFFFF, SectorSize0: 10
FLASH ID1: 00010000 <=> Flash -> not used Addr1: 0x02000000 - 0x02FFFFFF, SectorSize1: 0
First 16 bytes: AD 7E B6 1A 1B BE 0B E2 7D 58 6B E4 DB EE 65 14
Checking RAM for ALGO...
Algo is ready...
Checking FAID calculation...
P-key nokia module version 01.01
Done!
Phone Restarted...
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
ADSP Flash file: NONE
APE Variant file: NONE
APE User Flash file: NONE
Switching to serial...
Powering the phone...
Reading...
MCU SW version: V 4.00 10-19-07 RH-106 (c) NMP
HW version: 4201
PCI version:
UEM version: 2341
UPP version: 8850
RFIC version: 0700
DSP version: P06w45.v41
LCD version: SDI:NAXv89
S6B33BD
PPM version: V 4.00 10-19-07 RH-106 (c) NMP UB
ADSP SW version: V 4.00\n10-19-07\nRH-106\n(c) NMP\nub_lta
Production serial number: GAH902815
Product code: 0551854
Module code: 0203485
Basic production code: 0515530
Flash code:
Order number:
Product specific data:
Long production SN:
ATO:
Default SN type:
IMEI plain: 01138600151****
IMEI spare to net: 0A 11 83 06 10 15 91 07
IMEI SV to net: 03 11 83 06 10 15 91 47 F1
Master Code: 5732401157
Phone type: RH-106, Software version: 4.00, Language Pack: UB
User code: ÿ#
Block 1:
Lock 1: CLOSED -> Lock Data: 71610F
Searching for saved ini...
Checking for file C:\Program Files\ODEON\JAF\JAF_RH-106.ini
Saved INI not found, loading INI list...
Setting local mode...
Reading product code...
Product Code: 0551854
No ini files found...
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
ADSP Flash file: NONE
APE Variant file: NONE
APE User Flash file: NONE
Done!
_________________________
http://img81.imageshack.us/img81/415...lashingsp6.jpg
Flash with RH-105 1208 ver.4.00 firmware
http://img261.imageshack.us/img261/9...0bflashtf1.jpg
FILES SET FOR FLASHING:
MCU Flash file: C:\Uni\Files\Nokia\DCT-4\1208.RH-105\4.00\rh105_04.000
PPM Flash file: C:\Uni\Files\Nokia\DCT-4\1208.RH-105\4.00\rh105_04.00aa
CNT Flash file: C:\Uni\Files\Nokia\DCT-4\1208.RH-105\4.00\rh1050_nai4.00aa
ADSP Flash file: NONE
APE Variant file: NONE
APE User Flash file: NONE
Backing up PM Field 208 as RPL...
Setting local mode...
Reading IMEI...
Reading IMEI data...
IMEI data corrupt...
Failed to backup imei...
MCU: C:\Uni\Files\Nokia\DCT-4\1208.RH-105\4.00\rh105_04.000
Booting phone...
MCU ID: 0x2292
BOOT file: C:\Program Files\ODEON\JAF\Flash\u3_2nd.fia
Loader version: 04.46.01 -> Revision: 0007
Boot size is 0x09A8
Boot is ready...
FLASH ID0: 88280020 <=> ST -> Type not in database Addr0: 0x01000000 - 0x01FFFFFF, SectorSize0: 10
FLASH ID1: 00010000 <=> Flash -> not used Addr1: 0x02000000 - 0x02FFFFFF, SectorSize1: 0
First 16 bytes: AD 7E B6 1A 1B BE 0B E2 7D 58 6B E4 DB EE 65 14
Flash ID is 0x28882000
Flash loader is C:\Program Files\ODEON\JAF\Flash\u3_st_i.fia
Loader version: 04.46.01 -> Revision: 0007
Loader size is 0x4B38; Loader chk: df
Loader is ready...
P-key nokia module version 01.01
MSID: 84DCE0DBB76BE3D5CC04FCD0B6
MSID decoded: 3E4EBAE9009E8F2FA8000000
FAID: 91102539C8EACEE15FA9D36D
Operation took 0 minutes 13 seconds...
Erasing...
Found 5 interval(s) to erase
Erasing area: 01000000 - 0100FFFF...
Erasing area: 01010000 - 013AFFFF...
Erasing area: 013B0000 - 013EFFFF...
Erasing area: 017C0000 - 017EFFFF...
Erasing area: 01FC0000 - 01FEFFFF...
Operation took 1 minutes 16 seconds...
Writing...
Perm. Data Restore OK
Operation took 0 minutes 14 seconds...
Restarting MCU...
PPM: C:\Uni\Files\Nokia\DCT-4\1208.RH-105\4.00\rh105_04.00aa
Booting phone...
MCU ID: 0x2292
BOOT file: C:\Program Files\ODEON\JAF\Flash\u3_2nd.fia
Loader version: 04.46.01 -> Revision: 0007
Boot size is 0x09A8
Boot is ready...
FLASH ID0: 88280020 <=> ST -> Type not in database Addr0: 0x01000000 - 0x01FFFFFF, SectorSize0: 10
FLASH ID1: 00010000 <=> Flash -> not used Addr1: 0x02000000 - 0x02FFFFFF, SectorSize1: 0
First 16 bytes: AD 7E B6 1A 1B BE 0B E2 7D 58 6B E4 DB EE 65 14
Flash ID is 0x28882000
Flash loader is C:\Program Files\ODEON\JAF\Flash\u3_st_i.fia
Loader version: 04.46.01 -> Revision: 0007
Loader size is 0x4B38; Loader chk: df
Loader is ready...
P-key nokia module version 01.01
MSID: 84F3A63D908E1799E8C7763B37
MSID decoded: 3E4EBAE9009E8F2FA9000000
FAID: D4B18E97129EC78C8492E431
Operation took 0 minutes 13 seconds...
Erasing PPM...
Found 2 interval(s) to erase
Erasing area: 01240000 - 0124FFFF...
Erasing area: 01250000 - 0137FFFF...
Operation took 0 minutes 24 seconds...
Writing...
Perm. Data Restore OK
Operation took 0 minutes 7 seconds...
Restarting MCU...
CNT: C:\Uni\Files\Nokia\DCT-4\1208.RH-105\4.00\rh1050_nai4.00aa
Booting phone...
MCU ID: 0x2292
BOOT file: C:\Program Files\ODEON\JAF\Flash\u3_2nd.fia
Loader version: 04.46.01 -> Revision: 0007
Boot size is 0x09A8
Boot is ready...
FLASH ID0: 88280020 <=> ST -> Type not in database Addr0: 0x01000000 - 0x01FFFFFF, SectorSize0: 10
FLASH ID1: 00010000 <=> Flash -> not used Addr1: 0x02000000 - 0x02FFFFFF, SectorSize1: 0
First 16 bytes: AD 7E B6 1A 1B BE 0B E2 7D 58 6B E4 DB EE 65 14
Flash ID is 0x28882000
Flash loader is C:\Program Files\ODEON\JAF\Flash\u3_st_i.fia
Loader version: 04.46.01 -> Revision: 0007
Loader size is 0x4B38; Loader chk: df
Loader is ready...
P-key nokia module version 01.01
MSID: 84DCE0DBB76BE3D5CC04FCD0B6
MSID decoded: 3E4EBAE9009E8F2FA8000000
FAID: 91102539C8EACEE15FA9D36D
Operation took 0 minutes 13 seconds...
Erasing Content Pack...
Found 1 interval(s) to erase
Erasing area: 01380000 - 013AFFFF...
Operation took 0 minutes 4 seconds...
Writing...
Perm. Data Restore OK
Operation took 0 minutes 1 seconds...
Restarting MCU...
Operation took 0 minutes 0 seconds...
Flashing Done!
Operation took 2 minutes 55 seconds...
After flash processing...
Waiting for phone to boot...
Reading...
Phone type: RH-105, Software version: 4.00
IMEI: 01138600151****
Product Code: 0551854
Resetting PPC...
Done!
-----------------------
After flash processing...
Waiting for phone to boot...
Reading...
Phone type: RH-105, Software version: 4.00
IMEI: 01138600151****
Product Code: 0551854
Resetting PPC...
Done!
Powering the phone...
Unlocking...
IMEI: 01138600151****
ASIC: b
SW version: 4.00
Selected flash file: C:\Uni\Files\Nokia\DCT-4\1208.RH-105\4.00\rh105_04.000
Decrypting flash...
Encrypting....
CHK Patch found - Unlock Patch found and are not in same block
Patch status: 02
MCU ID: 0x2292
Algo is ready...
P-key nokia module version 01.01
Erasing area: 011E0000 - 011FFFFF...
Erasing area: 011E0000 - 011FFFFF...
Unlocking...
Checking locks...
Block 1:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Block 2:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Block 3:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Block 4:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Block 5:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Block 6:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Block 7:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Done!
DCT4 unlock counter: 131
http://img385.imageshack.us/img385/3...bunlockfz0.jpg
